cardiomessenger ii-s gsm firmware vulnerabilities and fixes

Recent CVEs affecting cardiomessenger ii-s gsm firmware, with upgrade or downgrade steps. 5 tracked.

Also searched as: cardiomessenger ii s gsm firmware, cardiomessengerii-sgsmfirmware.

cardiomessenger ii-s gsm firmware has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-06-29. Highest priority: CVE-2019-18252 (score 25/100).

• CVE-2019-18256 MEDIUM 4.6 MITIGATE MITIGATE BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a
• CVE-2019-18254 MEDIUM 4.6 MITIGATE MITIGATE BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest
• CVE-2019-18252 MEDIUM 4.3 MITIGATE MITIGATE BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purpose
• CVE-2019-18248 MEDIUM 4.3 MITIGATE MITIGATE BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to a
• CVE-2019-18246 MEDIUM 4.3 MITIGATE MITIGATE BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIO

FAQ

How do I fix cardiomessenger ii-s gsm firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is cardiomessenger ii-s gsm firmware being exploited right now?

None of the tracked cardiomessenger ii-s gsm firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which cardiomessenger ii-s gsm firmware CVE should I patch first?

CVE-2019-18252 currently ranks highest (25/100): BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purpose.

RSS feed for cardiomessenger ii-s gsm firmware · ← Back to latest CVEs